Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
File:                     KXnMQ8JGn_pc-LesY5sB86dorFU.mft (raw, json)
Hash identifier:          1zcxPHC9cunZxybNdDWOlRK6FV1k3l8FSkVEmJBtnYs=
Subject key identifier:   5F:93:CC:18:41:63:5D:9E:90:96:A2:9F:BE:57:CF:25:E8:18:67:96
Authority key identifier: 29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
Certificate issuer:       /CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Certificate serial:       0194BD8563C46EBA61F1C232B75B774733B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
Manifest number:          05CA
Signing time:             Fri 31 Jan 2025 18:00:23 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:23 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:23 +0000
Files and hashes:         1: 5LGX1MKVT0z55bmLSQ1IXTIx2F4.roa (hash: 08dmuUkJlZw+G4WOqOTIT+YQpFPaRzOkdOpwnzaIw7w=)
                          2: EI7dYlJh6LhMXB8o9nb3T4Z5aSU.roa (hash: MmSw3Gp5lTTxkK0eiPx+eF3FQfljG+ipyig54PF6DUw=)
                          3: KXnMQ8JGn_pc-LesY5sB86dorFU.crl (hash: Ffmzkte5bKbZ85xgaJXchkgbIbOnvdxPovtF8DwX1xs=)
                          4: RnDsNDAUOmfocBcXgLTcHPDDhKQ.roa (hash: yyfreslJl3l+RdMxXIwzsT6k7E7HMN8jhFZGTbEdlJI=)
                          5: _eEka1D2F9svheD7_1S50A6jg0c.roa (hash: FY3lzS47CrifHw8hxi2Yq9gCSugm8bX/KQaXGUUplkU=)
                          6: jTf4hu8p-YdeMkBcAMreST3RURY.roa (hash: IZtRwQReOQuA1Z4S5nLNVFRKIJVo5gpQ/QND37UUm9g=)
                          7: qV0bi1f4xUUogQC2jTvfOlCFNsY.roa (hash: JeZIDT/pHiJyZCYpNCof5wbSJ0INX3sJ+QZbs083uM0=)
                          8: tW9K0gmr3gNJNZi6H4Oj8e3Jn10.roa (hash: bWzKXJxMql9A44/Gmu3Ld5HFcp9B6Ivj+R3Ym/3BJEA=)
                          9: ueIl5HLpFqn43HBQc7-Q4ZVn06k.roa (hash: fzhg7jHCYT5oIQ824HH1vwjcqcxosVhT8YpZmbw8K50=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:63:c4:6e:ba:61:f1:c2:32:b7:5b:77:47:33:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
        Validity
            Not Before: Jan 31 18:00:23 2025 GMT
            Not After : Feb  1 18:00:23 2025 GMT
        Subject: CN=5f93cc1841635d9e9096a29fbe57cf25e8186796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:04:4f:ec:d8:91:88:22:58:f8:ee:e6:52:7e:
                    80:fc:6c:a7:91:5a:65:e5:3c:be:1c:67:f2:71:97:
                    4e:38:fc:43:60:e8:2b:d8:64:0f:96:60:a0:40:72:
                    46:5e:8a:68:00:ed:ca:4f:fa:b2:9b:27:b7:3a:cc:
                    0a:f3:81:55:ee:61:6c:25:8a:86:9d:34:76:4e:a2:
                    dc:84:c3:54:32:e4:e3:2d:f7:6b:0e:72:97:cf:ce:
                    30:76:a7:0e:ac:54:80:64:a4:7b:ab:a4:a2:14:5f:
                    a9:fe:8c:5c:ab:8e:37:8b:6c:d5:61:2a:b1:53:95:
                    90:3b:c7:ca:d2:9a:64:bf:6d:45:4e:29:f9:ae:63:
                    af:78:d9:e2:54:13:ff:32:35:a4:2e:9c:82:b9:f9:
                    cf:95:1f:69:21:9c:9b:d2:3b:8b:8b:e5:ff:d5:dc:
                    37:4d:d2:f6:12:fe:f5:60:59:b3:5d:3a:e9:61:fe:
                    f3:d4:1a:30:4d:fc:c9:8e:39:8c:11:8d:95:00:fb:
                    f3:67:b5:b5:8d:86:d0:46:41:7d:65:99:28:bd:d6:
                    2d:9f:62:3b:20:12:a3:8f:c1:49:17:d6:18:ba:b9:
                    67:2b:3a:bb:08:a5:ca:ca:85:47:19:3e:4d:20:49:
                    01:61:5e:a2:08:fe:af:b3:7c:61:13:d4:4c:c8:03:
                    f2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:93:CC:18:41:63:5D:9E:90:96:A2:9F:BE:57:CF:25:E8:18:67:96
            X509v3 Authority Key Identifier:
                keyid:29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:2c:ea:a2:b7:20:29:93:3e:53:f0:a4:39:10:a2:f1:2a:cd:
         f6:37:f3:79:6c:c3:62:b6:e0:9c:0e:6b:e2:fb:28:10:16:4e:
         fa:19:64:d3:96:19:73:01:97:4e:c4:9f:3d:bb:be:9d:90:88:
         bc:38:3a:ff:fb:06:99:56:f1:4a:e5:17:2c:59:63:8e:a9:d1:
         0c:6b:8c:b4:73:f7:61:0f:21:50:80:92:d8:3d:a1:1c:bf:6e:
         e5:c7:ef:50:c3:03:dc:6a:72:e0:f8:71:eb:40:b0:fc:b1:46:
         4e:85:57:91:9a:fa:30:6a:e7:04:6a:5e:ce:74:42:df:c4:67:
         0d:c4:be:03:65:87:b8:4a:45:eb:c0:d4:60:35:d0:3a:d7:93:
         64:54:d2:81:61:42:9f:5a:45:7f:8f:b8:66:d1:25:b2:8c:b9:
         61:da:64:3b:6d:1b:22:a4:e4:3c:e4:a9:68:30:29:55:87:b8:
         e5:a3:ec:0f:31:70:df:16:77:f4:8b:26:92:cb:f0:15:c6:e7:
         5f:26:bd:49:97:29:ea:b7:3f:55:cb:c4:51:61:f6:2a:23:a3:
         f0:5d:a9:3c:47:07:b3:2a:da:c6:a3:be:ac:fa:a7:50:09:6f:
         27:62:84:24:e4:60:2a:d3:2e:8a:32:df:73:c8:ff:82:0b:22:
         86:ad:f5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----